Update CHANGES.rst
Update CHANGES.rst

- explicitly call out the recent changes as the new release v0.9.3
- update the upgrade info for v0.9.0 to note the issue with the install user

caktus/tequila-django