Web vuln proof forced #to_s

* Proof for web vulnerabilities is now forced to a string for good measure.
* Updated logging methods to pass vuln info to the parent in the format he expects (for real this time).