testing login service call
generating coverage reports into /test/coverage

instead of /coverage (for less littered base folder)
allowing HTML in product description
restricted public API access

adopted API tests to reflect expected permissions of public API