update allowed_hosts