upload with token