use http.ServeFile instead of io.Copy