fix 2nd arg in send_from_directory in default route