Improved HttpRESTHandler allowedHosts logic (don't use reverse lookup)