server: add passworded endpoint for listing files

- /l: list up to 10 of the last uploaded files
- /l?limit=n: list up to n of them