make ufo loading more resilient

The more portable file traversal code would crash on no ufo file specified;
bail out instead of crashing.