Added allowed_hosts to config file.
Updated settings to pull allowed_hosts from config, and defaults debug to false.