Require well-formed paths in res.location()