Move file handling into form-session.

This greatly simplifies controllers accepting file uploads.
Upload limits haven’t been implemented yet.