POST a file with header X-Auth: <secret>