Img upload

Maddie,

The image upload code should be all tested and ready to go, though you may want to run your own tests.  The index page is also fixed to take thumbnails and the upload script gives user-friendly error messages.  Also, I increased security some.  Just merge this pull request and you should be good to go.

Best,
Peter