bucket: penalize bucket with read-only group when selecting one for writing
proxy: added common request handler, it reads data from local disk if url path doesn't match any registered handler. It reads data relative to @root config option. Also added test. Profile is now stored in the @root directory and can not be read via HTTP