Add a negative test for Host REST API

Change-Id: I84b2645f6a2521bb66a46f09793765956dfc5d04