API (/test): nothing coded yet, not authenticated.