1 * document configuration options better
2 * support setting of permissions
3 * validation methods for file format/size
4 * delete stale files from tmp directories
6 * ensure valid URLs are created even when deployed at sub-path (compute_public_url?)