added allowed hosts