[auth] remove auth module.
[perms] use django auth system to check permissions.