I think it's used to manage accounts and could be used for spam. The giveaway is the form asking for csrf token and session id; both required for Django to auth

I think it's used to manage accounts and could be used for spam. The giveaway is the form asking for csrf token and session id; both required for Django to authenticate and accept a POST request.