Usage:
  PUT /{id}            Upload a file (requires X-Auth header; set X-Pass for password protection)
  GET /{id}            Download a file (set X-Pass for protected files, or pass "password" as form)
  DELETE /{id}         Delete a file (requires X-Auth header)

API:
  POST /api/token      Create an upload token (requires X-Auth with root token, X-New for new token value)
  GET  /api/help       Show this help

Headers:
  X-Auth               Authentication token (required for upload and delete)
  X-Pass               File password (optional, for password-protected files)
  X-New                New token value (for POST /api/token)