include username and password in uploads
support auth token username and password