use nowrap on the HMAC
add UploadManager to constructor of Uploader, add method for uploader to read private data
move client secrets into assets