Fixed symlink security hole in server.
Added root user check, security documentation