added auth to php upload