updated allowed hosts