handle json response on global 404 and error handler
forbiden malicious path
stat not found support more codes
Merge pull request #2 from cnpm/json-handler

handle json response on global 404 and error handler