file-host: PUT /<filename> with X-Upload-Token to upload