api testing from scratch