Move auth stuff to its own django app.