move the fileupload() thing so we are ensured we have a username when we instantiate