corrected image upload features, removed hard-coded routes from controllers