Allow allowed_hosts to come from environment

@khandelwal Because it is expecting a single value rather than multiple values I assume.