allow route hosts