security updates for django and pillow