Add CVE-2012-1823 to hackurls list and optimize other regexps
Add X-Content-Type-Options, X-Frame-Options, and X-XSS-Protection headers
Provide a safe delete() method for file collections
Add support for including external resources using {#asset} syntax