cleaned image upload a bit, no longer using the filename sent by the user