remove extra exists check

This check is not needed as there is a similar one below the cache
check.
fallthrough if access attempt outside of source dir

removes need for httperrors package