final fix for issue #156: add ALLOWED_HOSTS to django settings