User needs a token to upload an image