Django auth fixes