updated settings to include production ALLOWED_HOSTS