add allowed file types to app.php