Add tests for 400 via MD5 check, 200 via OPTIONS, 200 with a Vary response, and hand verify the long path to 200