filetype whitelist
allow mass assignment for ap :icon
ap icon upload form and UI
git ognores uploaded images