limited allowed hosts to dev.