use ALLOWED_HOSTS in common settings.

We need to use this setting in django 1.5
SuspiciousOperation Exceptions will be raise when request.get_host() is called.
Braintree offsite and Amazon fps use RequestSite(request).domain which calls request.get_host()