It would be easier to parse as

```python
if not auth_token or auth_token not in settings.POSTFIX_AUTH_TOKEN:
```