add testing for customfield, correcting request injection