User allowed hosts can now be specified.

Previously was defaulting to '%' therefore relying on firewall.
Other minor touch ups.