spelling fixes in comments
adding URL_ROOT to form actions, may break legacy code and definitely won't work if URL_ROOT is not set
adding optional $options to send_file(), shouldn't break anything