Django-paranoid-sessions

* Add an extra session key that's only used for secure connections.
* Set session-related cookies to HttpOnly, if supported by Python.
* Back off aggressiveness of nonce-related defaults just a touch; they
were bumping too many legitimate sessions.

* Initial Release.