fix image upload with secret