avoid double lookup of the host object

as we have to look it up for auth anyway, return it, so we can continue using it.
add counters for client and server faults (per host)