removing http from allowed hosts