feat(upload): add test security

demo session id

time: 0h:10