Allow passing uploaded files as File or Inputstream objects to form methods.

Passing files as strings (i.e. paths to the temporary files) allows an
attacker to submit a filename instead of an actual file. The servlet has
no way to find out that this happened, and can therefore be tricked into
reading content from arbitrary files on the server.
Merge pull request #32 from gevaerts/master

Allow passing uploaded files as File or Inputstream objects to form methods
Merge pull request #33 from sergeds/master

Merge pull request #5 from Gluewine/master
Merge pull request #6 from Gluewine/master

Merge from Gluewine/Gluewine