fiddling with django user auth