[1.17] Fewer dependencies, various fixes

The most significant change is that vpub-plus no longer relies on gorilla/mux, gorilla/sessions and gorilla/csrf.

It also fixes various issues with vanilla renderer, image proxy and such.

Full Changelog: 1.16...1.17