debug and allowed hosts