allow only file uploads with standard image formats