login and file upload