prevent evil "Proxy" header being sent, see https://httpoxy.org for details