feat(forms): add upload form validation

- better handling of upload and form submission
- better error message 400 instead of 401
- csrf protection
remove debug requestbin url