Storing just request.path drops the query string which makes two factory authentication less useful when the guarded page needs those parameters. This brings the two factor authentication redirect behavior in line with devise's.
You have found the dummy rails app used for integration testing of the two_factor_authentication gem.
two_factor_authentication