Django Bypas CSRF and simple requests login

django.py

# app/views.py
from django.contrib.auth import authenticate, login
from django.http import HttpResponse
from django.views.decorators.csrf import csrf_exempt

@csrf_exempt
def login_user(request):
    user = authenticate(username=request.POST['username'],  password=request.POST['password'])
    login(request, user)
    return HttpResponse("Logged In")

def getAllTracks(request):
    if request.user.is_authenticated():
        return HttpResponse("Authenticated user")
    else:
        return HttpResponse("Non Authenticated user")
        
# urls.py
from app import views as app_views

urlpatterns = [
    url(r'^login/$', app_views.login_user, name='login'),
    url(r'^all/$', app_views.getAllTracks),
]

request.py

import requests

resp = requests.post('http://127.0.0.1:8000/login/', {'username': 'admin', 'password': 'qweasd123'})

print(resp.content)
print(resp.cookies)

cookies = dict(sessionid=resp.cookies['sessionid'])

print requests.get('http://127.0.0.1:8000/all/').content # without cookies

print requests.get('http://127.0.0.1:8000/all/', cookies=cookies).content # with cookies