fix #1088: don't remember return_to paths with /stylesheets/ or /javascripts/
[BUNDLE] relax sinatra-assetpack, fix admin to serve stylesheets without authentication