fixed allowed_hosts