Better http support and handle asm.offset in 'px'.

Implement dirlisting in http
get in /up/. Honor asm.offset in 'px'.
Fix r_file_root and crosspath vuln in http server