Couple small updates

- Extending window.DX if already present to minimize conflicts
- Fixing a bug in the Upload constructor's use of authToken