fix: public filter for HTTP_X_FORWARDED_HOST