apply /upload basic_auth