Solved ! (thanks traynor and browsermator)
I have one angular interceptor where by default it adds 'Content-Type': 'application/json' .
So I just have to exclude the "/upload" path.