Pin django-filter to a version < 2.0
Pin django-filter to a version < 2.0

Update dependabot config, which appears not to have worked.

See #117

mozilla/nucleus,mozilla/nucleus,mozilla/nucleus,mozilla/nucleus