unit test: secureAPI