Added authentication.
Bot upload now requires user to be logged in via /login, files will be uploaded to a folder with the user's name
only user is username: test password: test