bump Django version due to security releases