I learned something new. If you turn debug off, django needs an allowed hosts param.