Security bug :
Current thread does not clear, so the exception thrown by the parseRequest method can leak private data of last user.
Request headers with non-numeric port will cause error by the parseInt method and lead to problems.
Merge pull request #751 from ilinz/1.2.x

Security bug : leak private data of last user
ported [#1854] Add colon in host + port for test baseUrl by  Ransom Briggs to play 1.2.x
fix against XXE flaw