Enable empty-body GETs against /api/key
Fix filename sanitisation
Add pdf preview
Attempt to fix pdf preview
Attempt to fix pdf preview mk 2