Add tests around host and origin headers