update production allowed hosts