Test app for testing webapi permissions