authenticated function, upload books