Django authentication flow works