allowed sub domains with localhost