updated backend to user tursted hosts too

.env.example

@@ -16,6 +16,11 @@ ALLOWED_HOSTS=localhost,127.0.0.1,backend
 DEBUG=true
 
 
+# A comma-separated list of domains that Django will trust for CSRF purposes.
+# This should match your frontend domain.
+# Example: CSRF_TRUSTED_ORIGINS=https://holy.narl.io,http://localhost:5173
+CSRF_TRUSTED_ORIGINS=http://localhost:5173
+
 # --- SMTP Configuration ---
 # Rename this file to .env and fill in your details to enable email sending.