Add ALLOWED_HOSTS to dev settings