Fix requirements order and bump verison of django-custom-auth