allowed hosts update