hack HTTP AUTH into file upload so @substack can upload stuff