update django to 1.4.8 to get security fixes

and add the ALLOWED_HOSTS setting required by 1.4.6