Don't allow .. in Assets inputs
Include files with no extension handlers as server assets.

Also some miscellaneous test cleanup.
DevBundleFetcher plugin no longer necessary