Only need localhost in allowed hosts