trying out the flask test client and adding a test for accessing data when unauthorized