Test that we don't follow hostmeta redirects to non-HTTP through the webfinger() function