modify ALLOW_HOST to localhost