added ALLOWED_HOSTS setting