added testing structure, fixed authentication to only include root get and post methods, and added two basic tests