doing the vhost match based on lowercased Host, since some user agents don't lowercase