setup ALLOWED_HOSTS