working multipart upload. added checks for auth to friendslist