Implemented checks to see if a) the expanded file path of a requested repo dir is under the configured root repository path and b) the expanded file path of a requested file is under its repo dir. See security issue reported by @bloudermilk, issue #19. Added tests and helper methods (is_subpath? and get_root_dir).