Update Ch. 18 (spiking auth) listings for django4

[hjwp]

first pass thru chapter 18 bringing all the listings up to date for new django. not too bad.