auth by name & file inputs at request form