made allowed_hosts private