improved office preview in cluster

* hash the secret_key to generate a token for the add-task url to restrict access
* take care of 304 not modified when requsting converted office pages