Add beginnings of HTTP security test