Django CSRF_Trusted and Allowed Hosts issues

[KenWhitesell]

Correct.

In a url, the “http://” (or “https://”) is called the scheme.

You use the scheme in entries for CSRF_TRUSTED_ORIGINS.

You do not use the scheme for entries in ALLOWED_HOSTS.