comment out unused media root/url settings; add allowed hosts config