test that the json api only returns the expected keys