add localhost to allowed hosts