support STACK for different cedar stacks
prevent directory traversal
Merge pull request #282 from heroku/cedar-14

support STACK for different cedar stacks