server: use filename from multipart/form-data