Throw 404 in case of bogus paths.
Serve all of /static/* from the file server, not just /static*.

Also strip the path accordingly.
Give hints when the server can't run at port 80.
Use port 80 by default