last_login and date_joined should be readonly

This works even if the fields aren't present.