* Hide the "randomize filename" checkbox on the index and the "filename"
text box on the paste page
* Update API documentation to show random filenames in examples
* Don't force a random filename when overwriting with a valid delete key
* If a filename already exists and a random filename is being used, keep
generating new random filenames until one doesn't exist instead of using
a counter
Use of the Content-Security-Policy header to specify a referrer policy
was deprecated in favor of a [new
header](fc55d917be).
This change changes the existing referrer policy directives to use this
header and adds corresponding config options/command line flags.
X-Frame-Options has been deprecated by Content Security Policy Level 2.
We will need to provide the option for older browsers for the time
being, but frame-ancestors is preferred on newer ones.
Add a middleware that requires authorization for all POST, PUT, and
DELETE requests. This is done using the Authorization header and the
provided auth key is then checked against a file containing scrypted
auth keys. These keys are salted the constant string `linx-server`.