Add new omero.web.allowed_hosts setting, defaults to '*'