display allowed extensions at file upload