moves ALLOWED_HOSTS setting to localsettings