Awesome Django authorization, without the database