loop whoops
preserve original user filename (after cleanFileName()) for uploaded encounter images
actually do the right thing re: scarring input