http: add allow func

For further extendability
http: add TODO for peers var