added permissions to console and tests
added invalid endpoints test