improve image upload to only accept allowed types
Merge branch 'master' of github.com:whythawk/hrd