test without https