Ah, the classic "added login functionality" commit that touches 41 files. Nothing says "I definitely understand authentication best practices" like modifying every single file in your codebase to implement a login system. That security.py file is probably just for show – the real authentication logic is scattered across 40 other files like a treasure hunt for future developers.
This is the coding equivalent of saying "I tidied up the house" when you've actually just shoved everything under the bed, in drawers, and behind the couch. Future you will definitely not curse present you when trying to debug this masterpiece.