add move_tempfile option

when nginx runs as the same user as the rails app, copying tempfiles
to change ownership might not be necessary
enhance README

motivation, usage, security concerns, move vs copy