ResourceServlet should be configurable on "allowedResourcePaths" patterns

Currently, the allowed path patterns are hard-coded, so I cannot add '*.swf' resource.
We'd better make it configurable through init parameters for later extensibility.