Livy should not allow local files to be added to sessions

Users can provide local (i.e. file scheme) files in the list of files or jars to be added to sessions; this shouldn't be allowed (at least not by default), since it means people can abuse that to read files that only the Livy server has access to.