use local httptest.NewServer() for testing