Add documentation for new allowedHosts option