ImageValidator doesn't care about file ext case

Also corrects some escaping & scoping in the mime type matchers.