Tightening up deployment security by setting allowed hosts and database urls