don't allow users to upload files that don't match the paths extension