Test allowedExtensions in UploadField, return correct HTTP status