Improved security around file uploads - can now only upload with extension .jpg or .png