Create webinos.js from data folder

Rather than web-root/wrt - this causes security problems on Windows.

Also propagate security errors from test API listener.