def login(request):
    # some code omitted, like if request.method == "POST"
    credential = json.loads(request.body)
    username = credential['username']
    password = credential['password']
    user = authenticate(username=username, password=password)
    if user:
        if user.is_active:
            auth_login(request, user)
        else:
            return JsonResponse({"status" : 1, "err" : "Your account has been disabled"})
        # TODO: Now return what?