fix token upload