Avoid path traversal in DELETE requests

The DELETE request handling can be used to delete any file on the server as long as the node process has access to it as the fileName parameter is not properly checked from the client.

This fix ensures that the desired file in the upload folder.