api testing mistakes