human-size is build dep only. also update it
fix uuid.len() not html-safing
show progress total on uploads

closes #359
depend on latest multiparty

closes #358
config.js for plain operation
simpler config after permissions rework
config.js -> config.json