Only expose shared files

Only files that are shared should be exposed to other application users. 

This means that the fileEndpoint should either 
    - return a single file resource
    - return a directory filepath resource

This patch changes the tests to reflect the instance of serving a single file and a directory.