a user can delete their own images!
do some validation for file uploads