Add ALLOWED_HOSTS settings
Add tests for users API