add www to allowed hosts