edx-solutions/edx-platform — pull request #316 by chrisndodge (2014-11-12 19:59:35+00:00)
Title: When logging into the API, don't use the django.contrib.auth login() met...

...hod as that uses state that is stored on the request and could lead to bad things. Just make a new raw session which doesn't use the HTTP request object.