WIP: Merging django-secure into contrib.secure

For background info, please see the [django-developers thread](https://groups.google.com/d/topic/django-developers/t8ybImtdnpM/discussion).
This should be `contrib.secure`.