add is_project_name_safe()
only call chdir() at server.cpp