fix(auth): use djangorestframework login/logout views