1. CSRF

• {% csrf_token %}

2. django.contrib.auth

1.

• URL to use if the authentication system requires a user to login
  LOGIN_URL='/login'
• Default URL to redirect to after a user logs in
  LOGIN_REDIRECT_URL='/'

2.

• action="{% url 'django.contrib.auth.views.login' %}"