http://docs.djangoproject.com/en/dev/topics/auth/#storing-additional-information-about-users
() to return your custom object.
You will not be subclassing the User model; there's no need, and it
greatly complicates things to try. I'm currently working on doing this
myself, because I am adding requirements for the password change.
Namely, I need the password to expire after 90 days, I need the
initial password to require a reset after the first successful login,
and I need to enforce some rules about the complexity and non-reuse of
the password.
Shawn