Check that original extension is plausible before attempting to serve an image: otherwise, 404