File upload validation