django-hijack: Complete rewrite with a focus on security
Django Hijack is a popular package that allows admins can log in and work on behalf of other users without having to know their credentials. In PR #232 there has been a major rewrite to focus on better security. Worth a look and definitely update your package if you use django-hijack.