unit test coverage for report route
set correct access control allow methods
unit test coverage on test route