Move allowlist checks to background script

[rkalis]

In general I want all the complex logic to happen in the background script so it's easier to understand what is happening. So allowlist checks should be included in that. This means that we need to pass hostname from the content-script to the background script.