whitelist .jpg .jpeg .png and .gif as picture types #209