attach images to items. starting to protect against xsrf