Response Header problem

Testing my server with: https://test.activitypub.rocks

• checked: ActivityPub client-to-server server
• checked: Check if you'd like verbose debugging about what HTTP requests the server is running.

i've to sample server apps, one without authentication and one with google openId.

If I check an actor on my none auth app, which is returning:

Response body

{
  "id": "http://xxxxxxxxxxx.de/v1/actor/2",
  "type": "Person",
  "name": "name",
  "inbox": "http://xxxxxxxxxxx.de/v1/actor/2/following.json",
  "outbox": "http://xxxxxxxxxxx.de/v1/actor/2/following.json",
  "following": "http://xxxxxxxxxxx.de/v1/actor/2/following.json",
  "followers": "http://xxxxxxxxxxx.de/v1/actor/2/following.json",
  "liked": "http://xxxxxxxxxxx.de/v1/actor/2/following.json"
}

Response headers

content-type: application/json;charset=UTF-8  
date: Sun, 03 Feb 2019 12:54:59 GMT  
transfer-encoding: chunked  

The test suite is asking me for "auth token": "Unable to find OAuth endpoints... please manually insert the auth token:"

My second app with authentication enabled is returning:

Response body

{  
  "id": "http://xxxxxxxxxxx.de/v1/actor/2",  
  "type": "Person",  
  "name": "name",  
  "inbox": "http://xxxxxxxxxxx.de/v1/actor/2/following.json",  
  "outbox": "http://xxxxxxxxxxx.de/v1/actor/2/following.json",  
  "following": "http://xxxxxxxxxxx.de/v1/actor/2/following.json",  
  "followers": "http://xxxxxxxxxxx.de/v1/actor/2/following.json",  
  "liked": "http://xxxxxxxxxxx.de/v1/actor/2/following.json"  
}  

Response headers

cache-control: no-cache, no-store, max-age=0, must-revalidate  
content-type: application/json;charset=UTF-8  
date: Sun, 03 Feb 2019 12:58:47 GMT  
expires: 0  pragma: no-cache  
transfer-encoding: chunked  
x-content-type-options: nosniff  
x-frame-options: DENY  
x-xss-protection: 1; mode=block 

and the test suite tells me: "Sorry, there doesn't seem to be a valid AS2 object at that endpoint?"

So there seems to be a problem with my request headers, but i've no meaning what!