silly static files and allowed hosts