unit tests for access, app, auth, and routes