TODO cleanup session cookies serve local files handle locations lacking trailing slash WebSockets [dev]