[sec] lack of validation for sni name could lead to request trickery #12

when this was written, pingora lacked the ability to expose sni information to the backend-selection logic. this could allow a client to connect with sni to one backend, but use a host header for another backend.

this is now fixed