add testhandler
always validate your requests