Validate uploads against real mime type, not just extension.
Validate uploads against real mime type, not just extension.