allowing feature for file uploads to lock down permitted file types