Is removing this intentional? I see that the upstream default is ```django.contrib.sessions.backends.signed_cookies``` (which might be fine).