adding ALLOWED_HOSTS to settings