Added check for extension on PUT payload against list of allowed image extensions.