don't pin Django version