Implement acceptance spec: - response should be OK from the allowed hosts - response should be "Bad request" if request from other hosts