added tests for 3 actions in welcome controller and middleware for authentication protection