Superuser routes; improved thumb extraction

Also contains destructive database changes.  In production, you must, as
the database superuser, do:
  UPDATE pg_enum SET enumlabel = 'superuser' WHERE enumlabel = 'download';

I also discovered that play gets confused and hung running the current 1
down schema, presumably because it blows away its play_evolution (and/or
lock) tables.