upgrade Django to get security fixes