set ALLOWED_HOSTS to all by default