validate https, http_host and request method