Some users are still having problems with the pop-up login. I think they are actually getting 403s because of the CSRF protection. So I have modified the base template to always have a javascript variable called csrf_token available when they aren't logged in. The ajax_login.js script was then modified to send this value with the ajax post. Fingers crossed.

{% extends 'base.html' %}
{% block title %}Logged Out{% endblock %}
{% block content %}
<h2>Logged Out</h2>
<p>You are now logged out of SurfGuitar101.com. Thanks for spending some quality time with us today. Tell all your
friends about us and we hope we see you soon!</p>
{% endblock %}