tempimg upload endpoint
POST /upload.php  (header: X-Upload-Token)