More strick checks when setting timezone

Created by: SunilMohanAdapa

Currently, if someone gains access to plinth daemon, they can send a bad value when setting timezone. This value can contain '..' in the path leading to unexpected results. Make sure that these cases are properly checked for before attempting to set timezone in actions/timezone-change.