req.hostname becomes req.headHost, arguably less prone to name-collisions