added django cors and dev/production settings + heroku stuff