Modified production settings to allow from any hostname

This PR attempts modifying `ALLOWED_HOSTS` to allow from any domain name. Since in production we will be operating inside a private subnet with no access that we don't allow through the LB, this should still be a safe default.