added custom routes integration test and made sure you have to be logged in to create a new contact