Use djangotoolbox auth rather than djangae.
Use django secure/csp.