route_compare: use malloc'd instead of static storage
http_request: factor out 404 response to own fn
http_response: add TODO comment