Add HTTPSessionAuth for Django CSRF session auth.

This change needs a fix in Requests 1.0.3, so bumping the minimum
version in the deps.