finished img & doc uploading. Session based, please log in first to do anything other than login now
changed GET to POST