CSRF_TRUSTED_ORIGINS is already in configuration.py
And add some comments to the the file that hopefully guide the user.