rootio/cmd/root-srv: do not keep files in memory

[sbinet]

right now, when a user uploads a file, root-srv gobbles it up all in memory and keeps it there (until the user session expires).

• introduce a local mode where the file is directly open from the disk
• when remote or on appengine, store the file on some temporary storage (a tmp directory keyed on the user session name)