fixes #212, Included files in public folder can now be served as is. In other locations permission level is capped at REGISTERED_ONLY so any file can be linked to from an included file. This linking is needed to make existing setup of results work (including pdf description from results folder for example) but is a security issue. Setting this to fixed for now but creating an issue to check out security.