Add allowed_hosts setting