max-file-size

chris steipp requested that:

* we remove MAX_FILE_SIZE since we shouldn’t rely on it, are not using it,
  and don’t want to accidentally suggest to another developer that we
  are using it.

* we not urldecode in getUserOptions() after filtering the $_POSTed data,
  since it invalidates any urlencoding we may have done.

Change-Id: Ib97995ea991c6766f63c4da49d960f146a53b396