drop unused
drop session
Drop SecurePath

Use filepath instead to disallow directory traversal (need test).

Use filepath to create the file dirs instead os....