Add test for new feedback API and fix permission check for creation of feedback