bulk upload with authorization