Should use django.contrib.auth.SESSION_KEY instead of the hardcoded string.