added allowed hosts to production settings