working authentication, but can't upload files