Keep it private
Set 'test' env when starting express in test mode
Generate random token as pdf name
Return simple HTTP 404 instead of json
Use normal log stream for tests