Merge pull request #8 from claudius108/master

Removed system:as-user() for upload.xq
Set mode "rw-------" for security.metadata.xml file.

References #547.
Script for fixing the encoded at sign.

References #545.