limit django-polymorphic version to 0.4.0, since 0.4.2 seems to break with django-mptt