4.0.9

• dependency bumps (including resolved Django downgrade)
• removing old core requirements file because it was causing issues (unintentional downgrade) with dependabot