updated allowed hosts to wildcard value (insecure)