session.py

def login(request):
    try:
        data = json.loads(request.body)
        username = data.get('username')
        password = data.get('password')
    except ValueError as error:
        return JsonResponse.bad_request(message=unicode(error))
    user = auth.authenticate(username=username, password=password)
    if (user is not None) and user.is_active:
        auth.login(request, user)
        request.user = user
        return session(request)
    else:
        return JsonResponse.bad_request(message=unicode('Login Failed'))