upload-form now expects a zip-compressed file