MappedDirectoryHandler: explicitly disallow files outside document root
add test for MappedDirectoryHandler denying requests outside document root
version 0.4.1
minor fixes to install-tests