Security fix for django-wsgiserver to prevent escaping from media path.
Replaced django-wsgiserver with cherrypy itself, to fix streaming issues.

Wrote a custom wrapper that serves everything through the cherrypy static
file handler, which supports byte range requests, and thus scrubbing.