Normalize URI path before validation.

URI path is now normalized by path.join to ensure it has no doubleslash, dot or dotdot parts. Normalization will not allow it to go beyond root, so this makes the path safe to join with a destination directory.