Can now serve from app root other than domain root.
Fixed bug with handling of protected accounts.