Updates the new action for controllers to completely disallow attempted creation of a collection without a parent set.
Users interacting with the front end should no longer be able to select a permission for a collection above what its parent would allow.
Eliminates an unused session call in the new action.
Kludgey first attempt at ensuring that files can't set permissions above that of their parents.  Works but is ugly and quite stupid.
the controller for NuCoreFile now returns after any of the redirects it might perform.  Tests for said controller updated as well.
Eliminates the single file upload spec, which was barebones anyhow and will need to be completely rewritten at some point.