Tor Browser should use PROTOCOLINFO.
Tor Browser's control port code should use PROTOCOLINFO to do the right thing with respect to authentication. This includes things like "determining if cookie auth is enabled, and using the cookie, even if the env var isn't set".
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information