Note that the upload endpoint is on a separate domain.