- more general and less secure ALLOWED_HOSTS