Config fixes in django

* Added SITE_URL to local.py-dist because it's needed by django_browserid

* Commented out local cache from local config because it breaks an anonymous CSRF
and added info about this fact to the docs.