Test /api endpoint to get the list of available endpoints.
Tests unauthorized requests.