Working on credentials API
Use of validate() method on serializer to implement write-once fields.