update allowed hosts