Update default settings.

By default, set `DEBUG` to `False`. Also, add the `ALLOWED_HOSTS` setting and
give it a default value. These changes ensure that the application is, by
default, suitable for production use.