tested CSV endpoint through browser/curl