fix ALLOWED_HOSTS in settings to stop 400 error