added note about ALLOWED_HOSTS and DEBUG