include allowed host section

docs/61_dandi_authentication.md

@@ -81,7 +81,3 @@ For `.env.production`: This should also be located in the `web/` sub-directory -
 
 You'll need to update the relevant values that reflect what was in your `Social Application` object for both files. You will also notice an environment variable related to `Sentry` -- this value can be obtained from your Sentry account.
 
-
-
-
-

docs/64_dandi_archive.md

@@ -100,6 +100,26 @@ The only other major initial setup step for the DANDI Archive frontend is regard
 
 ## Updating Allowed Hosts
 
+For the Django-based DANDI Archive API to receive and send HTTP requests without CORS errors, you'll need to update `ALLOWED_HOSTS` within the `dandiapi/settings.py` file.
+
+The `settings.py` file, in general, can be understood as the configuration file for the Django app -- [see the Django docs for more info here](https://docs.djangoproject.com/en/5.0/topics/settings/)
+
+For the `ALLOWED_HOSTS` value to work, the following code snippet can be added, for example:
+
+```python
+class HerokuProductionConfiguration(DandiMixin, HerokuProductionBaseConfiguration):
+    ...other configurations...
+
+    if 'ALLOWED_HOSTS' not in globals():
+        ALLOWED_HOSTS = []
+
+    ALLOWED_HOSTS += [
+        '<your-api-url>'
+    ]
+```
+
 ## Approval of Users
 
+
+
 ## Setting up Staging Environments