All relations pointing to ManyToManyFields should default to read-only

This pull request addresses tomchristie/django-rest-framework#746