stream encryption

Files are no longer held in memory at any point during upload or download.

Currently, an OFB stream cipher is used to perform file encryption. This should be secure (if used properly), but I'm not totally confident in it. This is one of those areas where it'd be nice to have a professional cryptographer looking over our shoulder.