Improves escape path detection, returns 400

- Now requests like "/abc../abc./abc.md" pass test.
- Any requests that do have "/../" escapes are served a 400: Bad Request
- Abstracted detection to function so it can be unit tested