Why aren't we simply installing django-passwords and using it as a third-party package?