Testing for credentials transport (OWASP-AT-001)