The value from HTTP is checked first, after that the tenant in the URL.
If they differ, an error is returned as response