Add note about django.contrib.auth to 6.4