feat: allow files modification time with X-OC-Mtime header
fix: do not redirect on favicon and keep query in redirect after login
fix: preview on uploading or deleting images
chore: refactored tokens
fix: redirection loop after cookie expires