revise ALLOWED_HOSTS again removing the asterisk and adding some domains explicitly that we use right now; see www.ancbrigade.net