bump django rest framework, and dependencies