Lino's authentication system is rather naive compared to that of Django. We can improve both security and compatibility with Non-Lino Django apps (like restful_framework) by using Django's django.contrib.auth.login() function. This will change e.g. how username and password is stored in the session. Caution: Django 1.11 will replace the login() view by its class-based successor.