use host since request.domain doesn't include subdomain