made changes to lean more on the django auth system