Add localhost to allowed