port abuse resource to DRF (bug 910545)

`UserSerializer` and `AppSerializer`  will need to be refactored and improved as further stuff is ported to DRF, but this is a start.