We could add a JMAP test that uploads a blob via the frontend and download via the backend or vice-versa.
And for completeness, we could add tests via the frontend that GET The session object and do a POST of an API request (something as simple as Core/echo).
Ken suggests in https://github.com/cyrusimap/cassandane/pull/151#pullrequestreview-749058101