added alllowed hosts setting