Don't turn client-side typos into new rendezvous points
ETag cache
Server-side hash?
Log / audit log?
Prevent directory traversal attacks
Error handling
Reverse proxy to other local servers