Server: it was possible to open a database outside of the base URL (if one was set). The test case was broken.
