auditing non-httpa site