add testserver to allowed hosts since that's what requestfactory seems to use by default