pin django to right dependency