Allow setting --allow-external and --allow-unverified

With pip 1.5 you need to explicitly allow external sources for certain pip packages. This Pull request allows you to set `allow_external` and `allow_unverified` as arrays in the `django` block.