Yeah, the config you describe can work. What you could do (for example) is create some client credentials (https://www.medplum.com/docs/tutorials/security/client-credentials) and use those from your Django backend. Is this a patient/end-user facing application? Or more for doctors/practitioners?