add a much more secure, tho complicated, hostname check