Prevent people from setting STATIC_PATHS to a str

Previously you could accidentally set for example site/css and pelican would iterate through the string and attempt to copy '/' into your output.
Check all lists are not strings.