List attachments. Use HTML5. Improve MIME picking. Always iframe. Fix iframes with SCRIPT_NAME.

Fixes #38, fixes #39