updates to allowed_hosts