Update uadetector library
Insert missing semicolon
Set X-Frame-Options to sameorigin. 

Response of an ext.direct upload request is sent in an iframe. The
default setting in spring security (deny) blocks such a respone.