setting.py add attribute allowed_hosts