remove http basic auth, rely on input fields username and password sent with the file upload