upgrade django-session-csrf for safer keys

@washort r?