Add ALLOWED_HOSTS setting (required when DEBUG = False)