from django.http import HttpResponse, HttpResponseRedirect, Http404
from django.template import loader, RequestContext
from django.contrib import auth
from django import forms

def auth_view(request):
    username = request.POST.get('username', '')
    password = request.POST.get('password', '')
    user = auth.authenticate(username=username, password=password)

    if user is not None:
        auth.login(request, user)
        return HttpResponseRedirect('/accounts/loggedin/')
    else:
        return HttpResponseRedirect('/accounts/invalid_login/')

{% extends "base.html" %}

{% block title %}Login{% endblock %}

{% block content %}
    {# {{ form.as_p }} #}

    {% if form.errors %}
        <p>errors!</p>
    {% endif %}

    <form action="/accounts/auth/" method="post">{% csrf_token %}
        <input type="text" name="username" id="isername" value="" />

        <input type="password" name="password" id="password" value="" />

        <input type="submit" value="login" />
    </form>
{% endblock %}

from django.conf.urls import patterns, include, url
from django.contrib.staticfiles.urls import staticfiles_urlpatterns
from django.contrib import admin
from django.conf import settings

admin.autodiscover()

urlpatterns = patterns('accounts',
    url(r'^login/$', 'views.login'),
    url(r'^auth/$', 'views.auth_view'),
)

from django.test import TestCase
from django.test.client import Client


class TestLogin(TestCase):
    def test_login(self):
        client = Client()
        response = client.post('/accounts/auth/', {'username': 'qwe', 'password': 'qwe'})
        print(response.content)
        self.assertEqual(response.status_code, 302)

if user is not None:
       auth.login(request, user)
       return HttpResponseRedirect('/accounts/loggedin/')
   else:
       return HttpResponseForbidden()

self.assertEqual(response.status_code, 302)