Remove hard-coded 'Omawho' instances
Validate image server-side, to prevent bots from signing up.