Security checklist for Django apps