support for custom auth model, django => 1.5

Falls back to 'auth.user' unless custom model is defined in settings.