fix ALLOWED_HOSTS now that DEBUG=False in production settings.py