changed out active navigation marker logic, added in new security feature for ALLOWED_HOSTS