return first item of [general] -> host if origin is hidden

A minor regression introduced by the latest refactorings. A functional
test is now included. Only affects Firefox users that use non-SSL and
supress their HTTP Referer completely
clarify [general] host usage a bit
Merge branch 'hotfix/origin-fallback'