Added note on allowed host in documentation