set ALLOWED_HOSTS to * for now