Add test routes for role-based auth checking