adding simple django authentication, as per ticket #17