Django security updates in tox.ini