hide the upload-by-url box for now