Check filename extensions, allow not submitting a photo