set up an add-form based on the Entry model.  Exclude the user and date, which should be handled automatically
add login and login redirect urls
add login/logout urls, use extra args to pass info like which login template to use and where to go after logout.
add a bit of css for the control header and for entries
add a control panel to the base template so we can log in and log out and have a place to put the add-entry button
remove form from here, we'll put it in its own view
add url for adding a new post
add 'CreateView' subclass to allow us to postpone committing the new entry.  We want to use the currently logged-in user as the author, but we have to have a request object to get that.  The request is available in views, so we put the logic here.
note that all forms which are submitted with method="POST" __must__ have a csrf token unless specifically exempted from this.
set up a template for login that will look like our front-end
use the login_required decorator to ensure that no un-authenticated users can access the new entry form.

see django.contrib.auth.decorators