This is not the way that django gets the session and for that it will not be compatible with other auth-backends. I don't see that we use other auth backends for the 1.6 and for later, the chatbox has to be rewritten anyway. So for me this is ok.

Here is code for the django way: https://github.com/ostcar/OpenSlides/compare/AutoUpdateStep1#diff-7c6f932a39dd175b602a6f0f0344c2c6R67