Bugfixes, security improvements

1. Admin posts view actually works
2. User cannot create empty tag
3. Files group work on post creation
4. Unregistered users see only published posts on the main page.
Registered - everything but trash.
5. Correct handling of 404 and 403 responses of Api/GetPost
6. Return MimeTypes.txt