store ALLOWED_HOSTS in extra settings