Properly serve shared files

refs #3992
- Don't use path.join for URLs