use DATABASE_URL locally as well as in prod
don't duplicate ALLOWED_HOSTS setting