limited the types of files users can upload via Image Upload tool