send original request url to watchCallback instead of .styl path + cleanup
[security] prevent access outside of src dir
code style
v0.2.2