Restrict upload by mime types and size