using django auth now for authentication

and a lot of other updates