Don't use plain copy for media uploads.

Dropzone.js validates based on extension only, which is inadequate.

Since imagemagick is already a project dependency, we can use it to both check image files and strip metadata from images.