Use HTML5 file dropping instead of hidden inputs

This is more reliable cross-browser (before it was only working in
Chrome and Safari).

This fixes #1.