Add experimental support for SameSite cookie attribute

Prevent leaking if file exists outside of static path

This fix prevents the DirectoryApp from leaking that a file exists
outside of the given path by first checking if the path is correct
before testing if the file exists.