Turns out we need django-bcrypt or anyone who created passwords with bcrypt won't be able to log in.