HTTP boot requests from ARM are now serviced

A change from confluent 4 stream was backported to respond to HTTP boot requests

Fix for nodemedia attach

The restrictions around path access applied incorrectly to urls and blocked valid attach requests. This has been addressed.