testing security header in QA