gistfile1.py

@csrf_exempt
def seclogin(request):
    key_usuario = request.POST['param0']
    cipherpass = request.POST['param1']

    print key_usuario 
    print cipherpass

    aluno = Aluno.objects.get(key_usuario=key_usuario)
    privk = getPrivate(aluno.privatekey)
    senha = privk.decrypt(cipherpass)

    print senha

    user = authenticate(username=key_usuario, password=senha)
    if user is not None:
        if user.is_active:
            login(request, user)
        return HttpResponse("Conta desativada")
    else:
        return HttpResponse("Login inválido")