settings.py:

Added a TODO comment to the AUTH_EXEMPT_URLS to help explain
what to do with them in the future.