main/django: upgrade to 1.6.7 for security bugfix