updated route, added test basic auth