Rewrite Lettuce auth mock to not use session injection

Django 1.7 broke session injection (some might call it closing a
loophole regarding session fixation). Instead let's mock the auth
view to log the user in.