adding allowed_hosts to settings