validate _ in ALLOWED_HOSTS