assertions on http requests