deposit now uses filename for id if it's already a uuid