Consolidate validation attributes. Hash check now

only occurs if the filename is valid. This reduces the likelihood of the
server DOS'ing itself hashing a huge file for no reason.