Sorted out ALLOWED_HOSTS, and static files not being served with Debug=False (run runserver --insecure to fix this in development env)