Finally got secure data passing working between auth session and file upload