more restrictive filename routes for cached js/css files