validate profile on upload

Closes #14