add allowed host