respond with 400 error on missing host header