Move views.py, urls.py and testsite out of main package.

This way the testsite also becomes a reference implementation for Django auth policy.