remove bundled serve-static

- update readme
- update tests
- ensure extension redirect tests actually test redirect