REFACTOR: check filename against route documents

Add bypass arg to mprSetFilename to bypass checking
Use new fast path mprIsAbsPathContained for containment checking.