Make use of Django's authentication framework

[EdSchouten]

Django 1.8 and later provide a nice authentication framework. We should switch over to using this instead of storing all users/passwords in the web application's settings.