0.6.0

What's Changed

• fix authentication bypass on file download by @ggtrd in #44 (security issues reported in #43)
  • replace Referer with URL {id} parameter in unlock share requests
  • replace Referer with URL {id} parameter in file download requests
  • add time window (60s) to download file once share is unlock (cookie-based token)
  • add a periodic task to delete orphan files (file deletion no longer rely on share destruction)
  • move download file content-type application/json to application/octet-stream
  • fix concurrent issue for share unlocks

Full Changelog: 0.5.1...0.6.0