Also file permission cleanup

This consists mostly of commits I somehow skipped over and didn't patch
into the public repo

No memes allowed

This was meant to make it to clear to administrators that the value
should be changed, but too many have just left it alone and wondered why
gazelle takes forever to load (while waiting for the connection to
8.8.8.8 to time out)

Also I thought I removed this forever ago. Whoops.

Removed in commit 8143301713
Meant to remove SPHINX_MIN_MAX_MATCHES

- Default interval now 30 seconds (breaking!)
- Don't add default parameters to QR code (smaller)

Fixes #22

This involves temporarily decrypting all values being searched and
inserting them into a temporary table. Creation of this table can be
very slow when IP history is optionally searched. It might be better to
not make the temp table and just do the IP filtering from PHP.

Fixes #2

I swear one of these days I'll just do a search and replace all of them

I have no idea why that was there

Note that this requires a minor database migration of SiteOptions in
users_info and Paranoia in users_main

2FA class stolen from RobThree and stripped down.
Works best with qrencode utility installed, but will fall back to using
google charts if qrencode is missing.

For real though how was this even left broken like this? Did what.cd
just never use this feature or did they only half-port it to their
public repo?