tested the routes of POST, PUT, DELETE-- authentication denied my access to PUT and DELETE only.