referer redirect fixes:
- allow redirect if current Host: matches
- redirect request uri to host root, not current host path