[completes #55658046] add test for secure headers