Pin django-haystack dependency

The HEAD of django-haystack master is currently broken, which highlights
the dangers of linking to a moving target.

Fixes #479