Remove HTTP_X_FORWARDED_HOST from url

Can be a list, some use first, Rails use last, Django drops it
https://code.djangoproject.com/ticket/6880 (then makes it configurable)