anchor.diff:      KnownCertOpt = {ssl_options, [{certfile, CertKnown}, {reuse_sessions, false}]},
   
       % then - unauthorized access
  -    {ok, 307, Headers, _} = do_request(get, Endpoint ++ "files", [], <<>>, [UnknownCertOpt]),
  -    Loc = proplists:get_value(<<"location">>, Headers),
  -    ?assertMatch({ok, 401, _, _}, do_request(get, Loc, [], <<>>, [UnknownCertOpt])),
  +    {ok, 307, Headers, _} = do_request(get, Endpoint ++ "files", #{}, <<>>, [UnknownCertOpt]),
  +    Loc = maps:get(<<"location">>, Headers),
  +    ?assertMatch({ok, 401, _, _}, do_request(get, Loc, #{}, <<>>, [UnknownCertOpt])),
   
       % then - authorized access
  -    {ok, 307, Headers2, _} = do_request(get, Endpoint ++ "files", [], <<>>, [KnownCertOpt]),
  -    Loc2 = proplists:get_value(<<"location">>, Headers2),
  -    {ok, 307, Headers3, _} = do_request(get, Loc2, [], <<>>, [KnownCertOpt]),
  -    Loc3 = proplists:get_value(<<"location">>, Headers3),
  -    ?assertMatch({ok, 404, _, _}, do_request(get, Loc3, [], <<>>, [KnownCertOpt])).
  +    {ok, 307, Headers2, _} = do_request(get, Endpoint ++ "files", #{}, <<>>, [KnownCertOpt]),
  +    Loc2 = maps:get(<<"location">>, Headers2),
  +    {ok, 307, Headers3, _} = do_request(get, Loc2, #{}, <<>>, [KnownCertOpt]),
  +    Loc3 = maps:get(<<"location">>, Headers3),
  +    ?assertMatch({ok, 404, _, _}, do_request(get, Loc3, #{}, <<>>, [KnownCertOpt])).
   
   basic_auth(Config) ->
       % given
  
positive.code: 
  % Performs a single request using http_client
  do_request(Method, URL) ->
      do_request(Method, URL, []).
  do_request(Method, URL, Headers) ->
      do_request(Method, URL, Headers, <<>>).
  do_request(Method, URL, Headers, Body) ->
      do_request(Method, URL, Headers, Body, []).
  do_request(Method, URL, Headers, Body, Opts) ->
      Result = http_client:request(Method, URL, maps:from_list(Headers), Body, [insecure | Opts]),
      case Result of
          {ok, RespCode, RespHeaders, RespBody} ->
              {ok, RespCode, maps:to_list(RespHeaders), RespBody};
          Other ->
              Other
      end.
  
  
  rest_endpoint(Node) ->
  
negative.code:     Endpoint = rest_endpoint(Worker),
  
      % when
      AuthFail = do_request(get, Endpoint ++ "files", #{<<"X-Auth-Token">> => <<"invalid">>}),
      AuthSuccess1 = do_request(get, Endpoint ++ "files", #{<<"X-Auth-Token">> => ?MACAROON}),
      AuthSuccess2 = do_request(get, Endpoint ++ "files", #{<<"Macaroon">> => ?MACAROON}),
  
      % then
      ?assertMatch({ok, 401, _, _}, AuthFail),
  