[core] allow empty-dict default_classconfig
[http] prevent directory traversal (fixes #277)
Merge branch 'dev' of github.com:Eugeny/ajenti into dev