Fixed security hole in Pinto::Server.

The file responder would serve up files outside
the repository if you asked for a path like
"../../../../etc/passwd" for example.