Update to latest sf and add trusted_hosts parameter