added new security options for file uploads; changed default data_type in general.js to 'json' (quick&dirty workaround)