Fix an issue where “http” could sneak into the Host: header.