- add charset in JSON ContentType for buggy clients

- change view mecanism, model should be passed to the constructor
Disallow .. in a static path