shouldnt rely on http_host