update ALLOWED_HOSTS