ImageValidator doesn't care about file ext case

Also corrects some escaping & scoping in the mime type matchers.

Fixes: https://www.pivotaltracker.com/story/show/62137850