fix ALLOWED_HOSTS in base settings