* allow depth:0 at top of unmapped root * cannot use the Referer header to identify graphical browsers since rclone sends it