webgis: allow requests from all domains in 'ALLOWED_HOSTS'