fixed! now using django auth...need a new way to show SQLi