Respond with 400 on missing host header