added allowed hosts to settings