added localhost to allowed_hosts

the hostname and ip address do not work when using localhost or vagrant localhost forwarding, needed to explicitly add "localhost"