Add a "crop" route

Theoretically, this will handle our form submission, especially when
Javascript is turned off.