allowed_redirect_hosts filter