Added note about needing ALLOWED_HOSTS setting

Django 1.5 requires ``ALLOWED_HOSTS`` to be defined in production.
Add a note about this in the upgrade instructions.

Addresses #660