add test file and command
add test for api protection
set node env and use should instead of assert