> some sort of user signup/signin/forgot password auth and cookie/token flow. Django does not include anything for this and leaves it to the user to work out

But it does: https://docs.djangoproject.com/en/5.0/topics/auth/default/#m...