Fixed file server

Now has an Allowed paths list and checks getfile and files urls against it.
Returns Access Denied if the path is not allowed.