filtered out reserved filenames from /admin/staticfiles GET API