The browse.php endpoint now properly shows files from globs and displays the
parent correctly.
Document the endpoints.
Use methods on DerrickRootResource to handle special case code.
Add a method for testing the safety of filepaths.

Include tests for demonstrating what's allowed and not allowed.
Protect against escaping the jail, as much as possible, I guess.