added ALLOWED_ITEMS to server