added some tests for uploads

- [x] initial tests for `upload.rb` model
- [x] validate server-side that the user is uploading an image (through its mime/type)