fixed issue when path contains ../ and express believes it's malicious.