Change 16-byte filename, AES-256 and HMAC-SHA512

This is a massive change to maximize security and bring the URL back to 22
base64 characters. This push would not be possible without Alan Dawson -
https://github.com/burntout/.