Added paths that will check access control bypass using double encoding (CVE-2007-1860) that could allow a remote user to access Tomcat's administration panel. Based on the scenario demonstrated on https://pentesterlab.com/exercises/cve-2007-1860/course