CORE: fixed authorization in addHosts()

- When calling addHosts(), call getFacilitiesByDestination() from Bl not Entry.