I fixed this issue.
Apparently you need to add the scope media.write. to your login and use a user token… then re-log in to get a new token. that should fix that part. the endpoint is /2/media/upload.