change route params to queries, add more tests
handling invalid params
add tests data
fix auth test case