user expects be restricted to uploading png and jpg only

this fixes #106