write tests and limit access to /sidekiq