disallow script execution in IIS for uploaded files.  Issue #240