I think Django's 'sin' is trying to create an almost production-ready CMS when you invoke startproject. The default project comes with authentication, admin, CS

I think Django's 'sin' is trying to create an almost production-ready CMS when you invoke startproject. The default project comes with authentication, admin, CSRF protection, sessions, content types... the whole nine yards. Maybe there should be a second option "barebones" that created a settings file with most features disabled by default (yes, even the Admin.) Users who just needed a simple WSGI-compliant framework could start from there instead of figuring out what stuff to disable. You'd basically be on pair with Flask, with the advantage of having access to the advanced features just by dropping stuff in your INSTALLED_APPS and MIDDLEWARE_CLASSES settings.