always check if host/subdomain is allowed in the list of alowed subdomai...

...ns/hosts before redirecting