Some file updates

- adding hmac function in lib/crypto. rellay simple, takes text and
  password and returns byte array. great. done.
- adding note file download resource. just forwards the client to the S3
  url generated (with sig and everything)
- changed file upload loggin from :debug to :debu1.