hosts_allowed is variable