Bump to django 1.5.4 security update