added a test for successful protected call
cipher layer now sends sf data if available as x-sf-data header