cleaup

 * better error handling
 * remove log.info calls
add more injection and path attacks