Added security check for uploaded files. Checks with PHP function is_uploaded_file().
The K.Ajax.post() function now automatically detects an <input type="file"> element and sends it correctly (in modern browsers).