nginx: prevent potential `Host` header poisoning

Blocks requests to unknown host names to prevent potential `Host` header poisoning.

http://www.skeletonscribe.net/2013/05/practical-http-host-header-attacks.html