Remove backward compatible auth imports.

Several auth classes and methods were refactored and the
backward incompatible imports have been removed.

Important: SessionAuthenticationAllowInactiveUser was moved as
part of this release, so this release also adds a backward
incompatible change from any earlier version as well.