WIP: Update django

why are we not locking the django version here?