[WIP] embeddedable papaya viewer

Feature complete.  Todo:
-make anonymous image url (w/o filename)
-solution for CORS in static and sendfile media
-wrap bootstrap with scope tag (easy)
-tidy