fix the allowed hosts