Add localhost to allowed_hosts to allow testing of debug=False