Debug mode should be switched off in labman2/settings.py.
Define ALLOWED_HOSTS in labman2/settings.py.
Static files are to be served by apache of similar daemon.
Uncomment decorator csrf_protect.
Fixed for psycopg2-2.4.5 and later: Due to bugs in django tests, a new cleaner API semantics for the DB connection in version 2.4.2 of psycopg2 make the tests unusable without setting the autocommit mode. This option must be deleted for production. It's in DATABASES dictionary in settings.py.