fix(compat): put Referer.pk into session

This fix puts the Referer's primary key into the session as Django 1.6
now serializes the session as JSON instead of pickling for security
reasons.