allow groups and others r-x permissions

This fixes the bug in sage-5.4 and later where the user would not
be able to access 3D jmol plots if the server was being run with
a server_pool setup