overdid it with the image upload auth, making it a regular upload

brain/controller/APIControl.inc.php

@@ -188,21 +188,30 @@ class APIControl
 
         break;
       case "settings":
-        $token = $request->getHeader("fipamo-access-token");
-        if (Session::verifyToken($token[0])) {
         if (isset($body)) {
           $postBody = $body;
         } else {
           $postBody = null;
         }
-
+        $task = $args["fourth"];
+        if ($task == "add-feature-background" || $task == "add-avatar") {
           $result = SettingsAPI::handleSettingsTask($request, $args, $postBody);
+        } else {
+          $token = $request->getHeader("fipamo-access-token");
+          if (Session::verifyToken($token[0])) {
+            $result = SettingsAPI::handleSettingsTask(
+              $request,
+              $args,
+              $postBody
+            );
           } else {
             $result = [
               "message" => "API access denied, homie",
               "type" => "API_ERROR",
             ];
           }
+        }
+
         break;
       case "mailer":
         $result = MailerAPI::handleMail($request, $body, $response);

src/com/controllers/MaintenanceManager.js

@@ -266,8 +266,7 @@ class MaintenanceManager {
         }
       };
       if (requestType == REQUEST_TYPE_PUT || requestType == REQUEST_TYPE_POST) {
-        if (eventType === TASK_UPLOAD_FILES)
+        //if (eventType === TASK_UPLOAD_FILES) request.setRequestHeader("fipamo-access-token", self.token);
-          request.setRequestHeader("fipamo-access-token", self.token);
         switch (contentType) {
           case CONTENT_TYPE_JSON:
             request.setRequestHeader(

src/com/controllers/SettingsIndex.js

@@ -18,10 +18,7 @@ export default class SettingsIndex {
       null,
       "fe79df250470815bf32dcea70221384c89163cad3a827a9c3da25d87159ed55a"
     );
-    this.mm = new Maintenance(
+    this.mm = new Maintenance(null, null);
-      null,
-      "fe79df250470815bf32dcea70221384c89163cad3a827a9c3da25d87159ed55a"
-    );
   }
   //--------------------------
   // methods