Left to do:

Testing

• Write tests for EncryptedBinaryField model class (in tom_eso, for now)
• Write tests for UserSession creation/deletion upon log in/out
• test create_cipher_encryption_key [1]
• test key saving and retrieval from session store
• test signal handler: create_user_session_on_login
• test signal handler: delete_user_session_on_logout
• test signal handler: set_cipher_on_login
• test signal handler: clear_encryption_key_on_logout
• test signal handler: user_updated
• test password changed determination mechanism
• test reencrypt_sensitive_data
• test

Refactoring (after tests are written)

• move EncryptedBinaryField model to tom_common from tom_eso #1239
• rename set_cipher_on_login to something about and encyrption_key
• consider refactoring the cipher/encryption utilities out of signals.py

Documentation

• update internal documentation with strategy that actually worked

Notes:

1. bytes vs. str; write test as an example of usage