Fixing test failure for access permissions - exclude CSP endpoint
Adding tests for secure headers to TestableControllerTest