Move to req.headers.host for unauthorized access attempts on /screencasters, as ../ is more likely to break if we change anything