add basic filename validation