Update the 2.0 draft release notes.

This adds in everything from the 2.0 RC3 release notes that wasn't a regression
or fix for a 2.0-only feature.

Testing done: Built HTML docs and read through them.

Reviewed at https://reviews.reviewboard.org/r/5832/
Fix the security checklist with super-locked-down webservers.

Some web server configurations prevent uploading of files with suspicious types
(like .cgi, .php, etc). In this case, the security checklist would throw a 500
because it would fail to even save the file, much less fetch it.

I've rearranged things a little bit to catch OSError exceptions when saving
files and remove them from the list of things that we then test/delete.

Testing done:
Manually caused one of the file types to throw an OSError and saw that the
security checks still passed.

Fixes bug 3341.

Reviewed at https://reviews.reviewboard.org/r/5827/
Merge branch 'release-2.0.x'