To prevent "Host header Attack", system will reject any request that doesn't originate from the same origin.