[Answer]-Rasing a 401 in a custom authentication methoud for Django

From the Django documentation on this:

Either way, authenticate should check the credentials it gets, and it should return a User object that matches those credentials, if the credentials are valid. If they’re not valid, it should return None.