* Use Req.URL.RequestURI() to cope with FCGI urls * Add debug logging statement when forbidden in internal API.