broadened allowed_hosts from dev. to all subdomains