using environment variable for ALLOWED_HOSTS setting