Test tweaks, some more docs and redirect and forbidden in http