image upload prototype works.  authentication shell works