ALLOWED_HOSTS is a list of strings