securing papaerclip uploaded photo paths