Authenticate returns None with correct username and password during Userlogin

Question

My User login has some issue with the authentication process. I am using Django 1.9 and Python 3.6

this is my code repository

user = authenticate(username=username, password=password)

Returns user as none

This is how my Accounts/views.py looks for login

def register(request):
registered = False
if request.method == 'POST':
    reg_form = RegistrationForm(data=request.POST)
    profile_form = UserProfileForm(data=request.POST)
    if reg_form.is_valid() and profile_form.is_valid():
        user = reg_form.save()
        # print('before set password = ', user.password)
        user.set_password(user.password)
        # print('after set password = ', user.password)
        user.save()
        print(user.password)
        profile = profile_form.save(commit=False)
        profile.user = user
        profile.email = user.email
        profile.first_name = user.first_name
        profile.last_name = user.last_name
        if 'profile_pic' in request.FILES:
            profile.profile_pic = request.FILES['profile_pic']
            print('uploading pic .....')
        profile.save()
        args = {'reg_form': reg_form, 'profile_form': profile_form, 'registered': True}
        head_list.update(args)
        return render(request, 'registration.html', head_list)

    else:
        print(reg_form.errors, profile_form.errors)
        args = {'reg_form': reg_form.errors, 'profile_form': profile_form.errors, 'registered': False}
        head_list.update(args)
        return render(request, 'registration.html', head_list, args)
else:
    reg_form = RegistrationForm()
    profile_form = UserProfileForm()
    args = {'reg_form': reg_form, 'profile_form': profile_form, 'registered': False}
    head_list.update(args)
    print(head_list)
    return render(request, 'registration.html', head_list)


def login_view(request):
params = {}
params.update(csrf(request))
if request.method == 'POST':
    form = LoginForm(request.POST)
    if form.is_valid():
        username = form.cleaned_data.get('username')
        password = form.cleaned_data.get('password')
        # First get the username and password supplied
        # username = request.POST.get('username', '')
        # password = request.POST.get('password', '')
        # Django's built-in authentication function:
        print(username, password)
        user = authenticate(username=username, password=password)
        print('after aunthenticate', user)
    # If we have a user
        if user:
            # Check it the account is active
            if user.is_active:
                # Log the user in.
                login(request, username)
                # Send the user back to some page.
                # In this case their homepage.
                # return HttpResponseRedirect(reverse('/user_login/'))
                return render_to_response('user_login.html', RequestContext(request, {}))
            else:
                # If account is not active:
                return HttpResponse("Your account is not active.")
        else:
            print("Someone tried to login and failed.")
            print("They used username: {} and password: {}".format(username, password))
            return HttpResponse("Invalid login details supplied.")

else:
    form = LoginForm()
    args = {'form': form}
    head_list.update(args)
    # Nothing has been provided for username or password.
    return render(request, 'login.html', head_list)

The login.html page is shown below

{% block content %}
    <section class="container">
    <h1>LiquorApp Login Console</h1>
        <div class="login">
            <h1>Login to WebApp</h1>
            <form method="post" action="/user_login/">
                {% csrf_token %}
                {{ form.as_p }}
                {% comment %}Username: <input type="text" name="username" value="" size="50" />
                <br />{% endcomment %}
                {% comment %}<p><input type="text" name="username" value="" id="username" placeholder="username"></p>
                <p><input id ="password" type="password" name="password" value="" placeholder="password"></p>
                <p class="remember_me">{% endcomment %}
                  <label>
                    <input type="checkbox" name="remember_me" id="remember_me">
                    Remember me on this computer
                  </label>
                </p>
                <p class="submit"><input type="submit" name="commit" value="Login"></p>
            </form>
        </div>
    </section>
{% endblock %}

Please suggest where am I doing it wrong that my authenticate module is returning none.

I have also added the following in the settings.py file

AUTHENTICATION_BACKENDS = (
    'django.contrib.auth.backends.ModelBackend',
)

Answer 1

Django 2.1 authentication returns users for any authentication, only if user.is_active=TRUE and you need to first save the response of form.save(commit=False) and then set custom variables

if form.is_valid():
    user= form.save(commit=False)
    user.active=True
    user.staff=False
    user.admin=False
    user.save()
    messages.success(request, 'Account created successfully')

Answer 2

Remove

user.set_password(user.password)

from Accounts.views.register