coverage of secureAPI.js => 100%