Plain upload test — no browser headers