test(httpapi): cover remaining route scenarios