allow host header modifications