README.md - ALLOWED_HOSTS is in application.cfg