restrict uploaded file inputs to those in the form being submitted
Merge pull request #364 from bmatsuo/dont-upload-all-files

restrict uploaded file inputs to those in the form being submitted