updated to Django v1.5.4 security release

Fixes #172
Merge pull request #173 from bacongobbler/172-django-174-security-release

updated to Django v1.5.4 security release