added localhost in allowed hosts