Fix #1657 by allowing any request URI, but disabling static file serving...

... outside of known directories

Fixes #1657