DELETE gets forbidden in list_view whether allowed or not + tests; POST gets forbidden in single_item_view whether allowed or not + tests