It appears I can get the images to load with the form!

Turned off CSRF for the moment... will re-add (or dev-only) in the
future.