intermediate for testing (no secure layer http for requirements)