adding heroku to allowed hosts