file type/extension validation; file upload tests and fixtures;