auth fix & uploadfolder