Tweak serializer save code to be more correct

This switches the save code to be in save_object() rather than
save() which is more correct in regards to how django-rest-framework
expects you to do things.

minor r?