ResourceLoader: support non-URL (WAR-relative) paths
first pass at getResourceReferences()