When a picture is encrypted, save it to a temporary file first so that
the PHP function for rotation can access it as file.

add test for not failing when adding more comments after type parameters, do not limit x-www-form-urlencoded to POST

realpath() may return false in case the directory does not exist since we can not be sure how different PHP versions may behave here we do an additional check whether realpath returned false

remove methodannotationreader namespace

fix namespace for server container

fix tests

fail if with cors credentials header is set to true, implement a reusable preflighted cors method in the controller baseclass, make corsmiddleware private and register it for every request

remove uneeded  local in cors middleware registratio

dont uppercase cors to easily use it from routes

fix indention

comment fixes

explicitely set allow credentials header to false

dont depend on better controllers PR, fix that stuff later

split cors methods to be in a seperate controller for exposing apis

remove protected definitions from apicontroller since controller has it

One of the other failures is no running server.

Added extra code to handle the case of Oracle which saves empty strings
as null values.

We certainly don't want to have type juggling on that.

Images on public sharing get downscaled to increase use experience - this will speed up loading time

- adding keep aspect to core/ajax/preview.php
- remove duplicate method Preview::show()
- no more hard coded mimetype of preview
- remove .png from the preview urls
- keep old route preview.png for backwards compatibility
- aspect preserving previews are now cached