Value added to source field contains the site name and a random string.
This change prevents uploaders from using self-generated torrent files
unless they also add the source value themselves. This value is provided
to them on the upload page, but is still more inconvenient than before.

Fixes #1

Note that this password hashing change will cause an incompatibility
with a fraction of hashes made before this change. A migration is
necessary.

End goal is to remove all inline JS, starting with onclick

It's what we were using it for anyway

This is not particularly useful but it was fun

Namespaces are of the form tag:namespace and can be infinitely nested
ala tag:namespace:supernamespace etc