Updating django settings.templatesfor CORS and CSRF