You don't have an authentication step - an authentication step is not just comparing an input from a caller against a static PIN.
1) Use a Get User step to get a user object based on a string identifying the userID or extension, assinging the result to a User variable
2) Use a Authenticate User step to authenticate that user with a PIN or password
3) Reference the user with the 'upload' step.
Please rate helpful posts...
Please remember to rate helpful posts to identify useful responses, and mark 'Answered' if appropriate!