Django -- Site with users and login using csrf token for security