change to django default user as core, add token authentication.