added allowed_hosts setting