configuring allowed hosts