Add ALLOWED_HOSTS setting

Signed-off-by: Aaron Browne <aaron0browne@gmail.com>