Create pool on tests init and destroy on the end

While I'm here add a test to ensure unauthorized access.