1.7.4 “Space-dye Vest” bugfix release

This version includes the following bugfix:

 - fix a possible out-of-bound access when handling a request for
   a non-existent file in the root directory of a vhost that's
   matched by the `cgi` option

and the relative regression test.