put the security middleware as the first middleware

I don't think I've ever gotten a solid idea that this is *necessary*,
but I've seen other docs refer to/assume this, so sure?

countdown/admin.py

@@ -5,4 +5,10 @@ from django.contrib import admin
 from countdown.models import CountdownItem
 
 
-admin.site.register(CountdownItem)
+class CountdownItemAdmin(admin.ModelAdmin):
+    """Custom display for the countdown items."""
+
+    list_display = ('__str__', 'reminder_message')
+
+
+admin.site.register(CountdownItem, CountdownItemAdmin)

dr_botzo/settings.py

@@ -54,13 +54,13 @@ INSTALLED_APPS = (
 )
 
 MIDDLEWARE = (
+    'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
-    'django.middleware.security.SecurityMiddleware',
 )
 
 ROOT_URLCONF = 'dr_botzo.urls'