common/auth.py