requirements - bump django version
uploader, follow up to @ec1d9eb, refs #709

always grab name from session as upload_dir is provided
earlier in the pipeline