Work around rack-protection’s misguided path decoding

Fixes #145
Fixes #148
Revert "Get API spec passing."

This reverts commit f6c8c2060cedd37d24951a7cf8e58310b8340875.
Bump to v2.3.10
Merge branch 'release/2.3.10' into develop