Restrict image types to png, jpg and gif with server-side validation

Using paperclip's validates_attachment to resolve issue https://github.com/awesomefoundation/awesomebits/issues/61 in a more precise manner. 

One issue is that flash messages don't seem to be appearing to tell the user why their application isn't going through if its the wrong type still.