I have an ecommerce website that works in a classical way: people sign up, buy a product with their CC.
It uses the default Django auth system for users and registration
Keeping track of a user's session especially after they cross the boundry of signup/login is a tricky issue. I have written a referrals app http://paltman.com/how-to-easily-add-referrals-to-a-website/.