fix(@angular/ssr): support '*' in allowedHosts and warn about securit…

fix(@angular/ssr): support '*' in allowedHosts and warn about securit… #2881