Cache MongoEngine document's object class in ListQuerySet (mimic the original queryset)
Added authorization checks for subresources endpoints methods