fixed security problem with long name running under Jetty