Ban host test

Add a tests for banning by host, and find out whether we need the `X-Host` custom header.