Update Django to 1.4.12.

Looks like a clean upgrade, based on test output. There are some warnings about use of CSRF tokens in templates that Django thinks aren't getting tokens, but I wonder whether that's more to do with it not seeing something in how we use Jinja.