it "disallows phony URLs" do
    image_hash = {
      image_url: "iWroteThisWrong.net/2haLt4J.jpg",
    }
    image_params = params.merge(images: [image_hash])