uploads now filter out malicious users from uploading to listings that don't belong to them and also filters for only .jpg and .png. will write a deletePhotoServlet later on