Use extensions instead of mimetypes for allowable uploads
Every field should be hidden