Add additional tests for X-Forwarded-Host

Against Cypher REST response, and slash redirects