enable user auth and upload