make django cookies https-only
update cookbook version
Merge pull request #122 from python/django-sec

improve Django security settings