allow authorization token in request URL for media requests

update before 0.2.0 release

allow content-type headers in requests

increase outdated metadata threshold to a week

don't use wildcard for CORS allow headers

fix deduplication of included entities

Closes #3

treat empty string disambiguation as none

fix genre id generation

properly set genres for releases

add release disambiguation migration