In particular, I was thinking of creating an auth-token as:

[HMAC(payload)]$[IV]$AES128(payload)

Where payload would be a JSON object:

{
   "source":"django_session",
   "session": [sessionId]
}