added allowed hosts to base settings