Pin django-cas to hash

Per the comments in #5992 we are pinning django-cas to prevent a stealth upgrade for changes that happen in that repository.