add to allowed hosts