fix settings allowed hosts