added allowed hosts to production.py