rounded out bonus API commands, and added tests - need whitelisted IP to continue.