push permissions down into all levels
refactor public data handling
adapt reaper to new pfile aux file naming scheme
streamline dispatching
update permissions
update /sites route
add quarantining for unparsable uploads
move /login to /users/self
return 401 for bad tokens
refactor User PUT based on json payload