added base level of security (filetype check) to uploadhandler