added prawf.heliwm.com subdomain to allowed list