Ideally, users should be allowed to own and control the content they upload onto the servers to an extent. This should include allowing the users to:

API

• set a deletion password to remove a file (only store bcrypt hash)
• set how long a file should stay on the server before expiring (default: forever - need API/WEB/Scheduler implementation)
• encrypt/decrypt uploads via "password"

WEB

• add deletion page
• implement user settings (expiration, delete key)