picture upload format validation