audit: test automatic timestamp
show Audit in API, with permissions and tests