fixed hacked path to request.path, added evidence to returned data