This tests that the X-XSS-Protection reports are sent out properly