Demo app accepts photos only. (client-side validation)