fixed allowed hosts setting