Also create seperate account security options page

This commit requires a new database table

Also miscellaneous permission-related fixes

We encrypt PMs, so if the encrypted text is truncated by mysql, the
entire message is destroyed. Truncate it before encryption so that
doesn't happen

These features only have any value if users actually use them, and
experience has shown that nowhere near enough users use them to make
them worthwhile.

This was an automatic mass-replace. Manual replacement of array(...)
will continue

ISPs can't see filenames through TLS. This option is useless in a
codebase that forces HTTPS, and only confuses users.

Tooltips: fix on user page

- Removed unused JS functions
- Inlined functions not often used
- Minimized some overly verbose functions

Fixes #27

Fixes #25 and fixes #26

This consists mostly of commits I somehow skipped over and didn't patch
into the public repo

No memes allowed

This was meant to make it to clear to administrators that the value
should be changed, but too many have just left it alone and wondered why
gazelle takes forever to load (while waiting for the connection to
8.8.8.8 to time out)

Also I thought I removed this forever ago. Whoops.

Removed in commit 8143301713
Meant to remove SPHINX_MIN_MAX_MATCHES

- Default interval now 30 seconds (breaking!)
- Don't add default parameters to QR code (smaller)

Fixes #22

I swear one of these days I'll just do a search and replace all of them

I have no idea why that was there

2FA class stolen from RobThree and stripped down.
Works best with qrencode utility installed, but will fall back to using
google charts if qrencode is missing.

Apparently not doing this is technically invalid