[Django]-Passwords being stored as sha1 and pbkdf2_sha256

Did you perhaps upgrade from Django 1.3 to Django 1.4 while retaining user data? Django 1.4 introduced the newer, more secure hash for password storage, but should still be backwards-compatible with the old hashes as far as I am aware.