You could use something like Django as an API for React to hit. It has user auth, and if you use django-rest-framework it works flawlessly with React/webpack