req.url could be set from outside, so no needs in that header