Update configuration warning to mention defusedxml

This is mentioned in the README & docs but should also be mentioned in
the actual ImproperlyConfigured exception which is raised when you try
to use XML without all of the dependencies.