modify upload auth