Added tests for custom routes and made sure user has to authenticate before posting