[testcase] adding case where the endpoint it outside the secured content