base upload, fix multi-authentication