I completely agree. I think this problem is rather pervasive in Django (it goes far beyond just the authentication system).