settings: define ALLOWED_HOSTS