added ALLOWED_HOSTS to prod settings