moved allowed_hosts to settings example. We'll need to set this in prod.