Removed in commit 8143301713
Meant to remove SPHINX_MIN_MAX_MATCHES

- Default interval now 30 seconds (breaking!)
- Don't add default parameters to QR code (smaller)

Fixes #22

I swear one of these days I'll just do a search and replace all of them

I have no idea why that was there

2FA class stolen from RobThree and stripped down.
Works best with qrencode utility installed, but will fall back to using
google charts if qrencode is missing.

Apparently not doing this is technically invalid

Value added to source field contains the site name and a random string.
This change prevents uploaders from using self-generated torrent files
unless they also add the source value themselves. This value is provided
to them on the upload page, but is still more inconvenient than before.

Fixes #1

Note that this password hashing change will cause an incompatibility
with a fraction of hashes made before this change. A migration is
necessary.

End goal is to remove all inline JS, starting with onclick

It's what we were using it for anyway