bump requirements to recent versions

Apply security updates for Django and Pillow

Also replaced django-filebrowser fork,
changes have been merged in.