Travis test the latest versions of Django

This way you don't have to update every time a security release comes
out.
Re-instate conf test as per recent threading fixes. Closes #858.
Merge
Return HTTP 405 on comment/rating URLs for GET requests. Closes #1159.