Add permissions testing
Add forgotten trailing / in urls.py