File upload button in secure forms is insecure