join raw path when creating Path
add tests addressing #18
rename local variable 'path' to 'rawPath' to avoid name collision
with the path package.
Merge pull request #18 from freehaha/master

security bug: static file serving arbitrary file/source - Great work.