Make file upload files more readable, fix upload permissions bug.

Tempfile uses permissions 0600, which means it ends up the source
directory as 0600 after we mv it. This fixes the problem by relying on
0666, with the removal of File.umask. So for a umask of 022, this will
leave permissions rw-r--r--.
Mention permissions fix in CHANGELOG.