Documents open reliably

Customer documents are now served from a stable address rather than a link that could expire before you opened it, so a document you were sent keeps working.

Both the customer and the admin document lists also show a loading indicator while they fetch, so a slow list no longer looks like an empty one.