fix typo in url pattern
add config value allowed_host for cross domain origin