Bump our Django requirement to 1.6.6.

This fixes a number of security vulnerabilities found in earlier
versions of Django.

See: https://www.djangoproject.com/weblog/2014/aug/20/security/