Setting ALLOWED_HOSTS is not better