Accounts stuff is provided by an upstream package, django-allauth. Confirm on logout is handy so you can't trick a user into GETing a log out page, it has to be POSTed.