zzb upload
user auth