added allowed hosts in settings