Use (possible customized) settings.AUTH_USER_MODEL instead of auth.User

(sorry about reverted commit within - as mentioned in my previous closed pull request, I haven't seen the request made by Matt-Stevens that should fixed that)