Verify path (forbid dot files) and enforce canonical paths

Use regex to detect path to dot files and reply notFound
Use no extra dot for root to ensure canonical path
Fix title using virtual path
Add user-friendly error when file/dir not found

Instead of IO crash (internal server error)