Making a request like so: ``` post :create, {}, { "X-BLAH" => "blah" } ``` ends up with a request object with the specified headers nested in "rack.session": ``` #<ActionController::TestRequest:0x105e02698 ... "rack.session"=>{"X-BLAH"=>"blah"} ... > ``` so, for instance, sending an HTTP_AUTHORIZATION header doesn't get picked up by `authenticate_or_request_with_http_basic`. I'm using the gems: ``` gem "rails", "3.0.0.beta3" gem "rspec", "2.0.0.beta.9" gem "rspec-rails", "2.0.0.beta.9.1" ``` Ben ps. This didn't happen with rspec 2 beta4