Recognize the root path

@liveh2o, here's an attempt at fixing the root route issue. It requires all `allowed_paths` to start with a slash, but that's inline with the README, so it's "probably okay."