adding allowed hosts