user settings form: making upload mugshot work