upload prepending, slash after foldername, and make session expiration
an error