Upgrade django to 5.2, python to 3.13 (#1915)

users/admin.py

@@ -5,6 +5,7 @@ from django.utils.translation import gettext_lazy as _
 from .models import User
 
 
+@admin.register(User)
 class EmailUserAdmin(UserAdmin):
     fieldsets = (
         (None, {"fields": ("email", "password")}),
@@ -59,6 +60,3 @@ class EmailUserAdmin(UserAdmin):
         "claimed",
     )
     search_fields = ("email", "display_name__unaccent")
-
-
-admin.site.register(User, EmailUserAdmin)

users/views.py

@@ -330,7 +330,7 @@ class UserAvatar(TemplateView):
         ):
             # check if user is on pages that require CSRF but don't require login
             # (auth pages where anonymous users submit forms)
-            referer = self.request.META.get("HTTP_REFERER", "")
+            referer = self.request.headers.get("referer", "")
             current_path = self.request.path
 
             # paths that anonymous users can access and have forms