Mysql kerberos urlpatterns

see commit messages for what this PR does.

the only functional change is that the kerberos auth backend is now the last one instead of the second. i can't really imagine something breaks because of this, and you're always free to override everything in the localsettings, so i thought that was okay.