prevents the full file path from being exposed to the api. fixed #5