Support bypassing Host check

An empty $httpHost can be passed to circumvent checking Host header.