now "not a directory" leads to http.StatusForbidden
fixed deletion of pair as directory