Make ALLOWED_HOSTS configurable by environment variable