Fixes some content issues, and a security bug allowing execution or arbitrary code.

Changelog:

 - fixed: can't add EMS tickets to badges
 - fixed 8962: Wrong mime-type used for json data
 - fixed: default site has no content
 - fixed: possible to execute arbitrary perl code as any user that can upload files