as part of #282, limit uploads to images