Protecting again host header injection in Rails 5

Sample app to test - and protect against - host header injection.