Read allowed hosts from environment

Recent versions of Django disallow connections with target hosts
not listed in `ALLOWED_HOSTS`. This change separates the hostnames
from application code.