add bad request check using hostname