add allow hosts