Confirm support for Django 1.7.

No code changes were necessary.
Tweak README a bit.

Discourage using the equivalent of PHPSESSID.
Clean up flake8 output.
Fix #3 -- Support token expiry.