add ALLOWED_HOSTS