testing on host because of same origin