MIDDLEWARE_CLASSES is deprecated in Django 1.11

I assumed the default middlewares (the ones generated by django-admin
startproject) were fine.

experiENS/settings_base.py

@@ -53,16 +53,15 @@ INSTALLED_APPS = [
     'avisstage'
 ]
 
-MIDDLEWARE_CLASSES = (
+MIDDLEWARE = [
+    'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
-    'django.contrib.auth.middleware.SessionAuthenticationMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
-)
-
+]
 
 TEMPLATES = [
     {

experiENS/settings_dev.py

@@ -16,9 +16,7 @@ if USE_DEBUG_TOOLBAR:
         'debug_toolbar',
     ]
 
-    MIDDLEWARE_CLASSES = (
-        'debug_toolbar.middleware.DebugToolbarMiddleware',
-    ) + MIDDLEWARE_CLASSES
+    MIDDLEWARE += ['debug_toolbar.middleware.DebugToolbarMiddleware']
 
 INTERNAL_IPS = ['127.0.0.1']