Is the login function incomplete?

[Ru7z]

Hi, i am an audience from Youtube.When i was learning this course, i found some questions.

• Blog-API-with-Django-Rest-Framework/src/accounts/api/views.py function:post
  I think it's needed check_password here.
• How can i sign out if it's needed.
  So i think the login function is not complete.Is it necessary to update self.request.user.So the user logged in can log out.

Thanks for the courses, i learned a lot from it.
Waiting for your replay.

[Ru7z]

from django.contrib.auth import (
    get_user_model,
    login,
    authenticate)

# ...

def post(self, request, *args, **kwargs):
    data = request.data
    username = data.get('username')
    password = data.get('password')
    user = authenticate(username=username, password=password)
    if user is not None and user.is_active:
        login(request, user)
        serializer = UserLoginSerializer(data=data)
        if serializer.is_valid(raise_exception=True):
            new_data = serializer.data
            return Response(new_data, status=HTTP_200_OK)
        return Response(serializer.errors, status=HTTP_400_BAD_REQUEST)
    return Response('password error', HTTP_400_BAD_REQUEST)