Make Django sessions work harder to prevent session-stealing attacks