image upload will only allow picture format files