fix ALLOWED_HOSTS = ['*']