updated allowed hosts setting