harness tests for tenant mismatch URL/HTTP-header
fixes during PR review