update client scripts to work with new token based upload