use req.headers.host