add allowed_hosts to local_settings