should we do an assertion that there is no host header?