diff --git a/hashflix/settings.py b/hashflix/settings.py
index 6900798..ba85516 100644
--- a/hashflix/settings.py
+++ b/hashflix/settings.py
@@ -25,7 +25,7 @@
 TOKEN_CSRF = os.getenv("TOKEN_CSRF")
 if TOKEN_CSRF:
     SECRET_KEY = TOKEN_CSRF
-    CSRF_TRUSTED_ORIGINS = ['https://sitecomdjango-production.up.railway.app/']
+    CSRF_TRUSTED_ORIGINS = ['https://sitecomdjango-production.up.railway.app']
 else:
     SECRET_KEY = 'django-insecure-%^9!uvtl3#@2kx0p_t-j2_*lwv-l%pj%vcbrew_cy30xv3&rzi'
 
@@ -33,7 +33,7 @@
 DEBUG = True
 
 ALLOWED_HOSTS = [
-    "https://sitecomdjango-production.up.railway.app/", "localhost", "127.0.0.1"]
+    "sitecomdjango-production.up.railway.app", "localhost", "127.0.0.1"]
 
 
 # Application definition