set ALLOWED_HOSTS to '*'