making some investigation work about how django authorization system works