Add a middleware to require auth for all requests

common/middleware.py

@@ -0,0 +1,8 @@
+from django.core.urlresolvers import reverse
+from django.http import HttpResponseRedirect
+
+
+class LoginRequiredMiddleware:
+    def process_request(self, request):
+        if not request.user.is_authenticated() and not "/admin" in request.path_info:
+            return HttpResponseRedirect(reverse('admin:index'))

common/settings.py

@@ -95,6 +95,7 @@ MIDDLEWARE_CLASSES = (
     'django.contrib.messages.middleware.MessageMiddleware',
     # Uncomment the next line for simple clickjacking protection:
     # 'django.middleware.clickjacking.XFrameOptionsMiddleware',
+    'common.middleware.LoginRequiredMiddleware',
 )
 
 ROOT_URLCONF = 'common.urls'